Dragons EyeRansomware tracker

US state report · AZ

Ransomware claims in Arizona

Claims that ransomware groups posted against organizations we could place in Arizona, over the last 12 complete months.

Data: ransomware.live · Statistics generated Oct 25, 2026, 07:18 UTC, refreshed hourly

Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we track them, we do not verify them.

Claims, last 12 months
37
So far in October 2026
6Month in progress, not in the trend
Address on own website
29Confirmed location
State named in claim
8Inferred location
Latest claim
Oct 16, 2026

Claims per month in Arizona

Located Arizona claims in the last 12 complete months (UTC).

  1. October 2025: 2
  2. November 2025: 2
  3. December 2025: 2
  4. January 2026: 2
  5. February 2026: 6
  6. March 2026: 2
  7. April 2026: 4
  8. May 2026: 4
  9. June 2026: 4
  10. July 2026: 3
  11. August 2026: 4
  12. September 2026: 2

Top sectors

2 claims had no sector label and are not shown.

  1. Manufacturing6
  2. Business Services3
  3. Construction3
  4. Attorney2
  5. Distribution2
  6. Education2
  7. Financial organizations2
  8. Medias and audiovisual2

Top cities

Only addresses confirmed on organizations' own websites.

  1. Phoenix6
  2. Mesa3
  3. Queen Creek3
  4. Scottsdale3
  5. Tempe3
  6. Tucson3
  7. Chandler1
  8. Clarkdale1

Latest claims in Arizona

Allegation by a ransomware group, not a confirmed attackEach row is a claim posted on a ransomware leak site. Inclusion does not mean the organization was breached.

The 25 most recent claims placed in Arizona, newest first. Dates are when a tracked source first observed the claim (UTC).
ObservedOrganizationGroupSectorLocationEvidence
Oct 16, 2026Caretaker Landscape and Tree ManagementpearNot reportedGilbert, AZ Own website2+ sources
Oct 15, 2026kidzrkooldental.comlockbit5HealthcarePeoria, AZ Own website2+ sources
Oct 8, 2026LumabuiltnightspireManufacturingPhoenix, AZ Own website2+ sources
Oct 6, 2026PIR Salesthe gentlemenManufacturingChandler, AZ Own website2+ sources
Oct 6, 2026Watermark Retirement CommunitiespayoutskingHealthcareTucson, AZ Own website2+ sources
Oct 5, 2026OnsemiqilinTechnologyScottsdale, AZ Own website2+ sources
Sep 24, 2026Arizona Vascular Medical Equipment, IncdragonforceHealthcareMesa, AZ Own website2+ sources
Sep 2, 2026specialtytextile.comINC RansomManufacturingAZ Named in claim2+ sources
Aug 23, 2026Weber Water ResourcesmetaencryptorWater distribution and supplyMesa, AZ Own website2+ sources
Aug 17, 2026Arizona State UniversitydirewolfEducationTempe, AZ Own website2+ sources
Aug 10, 2026Cook RemodelingGlobal Secret GroupConstructionMesa, AZ Own website2+ sources
Aug 4, 2026TRULITE GLASS & ALUMINUM SOLUTIONSINC RansomManufacturingPhoenix, AZ Own website2+ sources
Jul 23, 2026Bulwark ExterminatingkillsecBusiness ServicesQueen Creek, AZ Own website2+ sources
Jul 23, 2026Bulwark Exterminatingkillsec3Not reportedQueen Creek, AZ Own website2+ sources
Jul 18, 2026V&P NurseriesINC RansomAgriculture and agribusinessQueen Creek, AZ Own website2+ sources
Jun 18, 2026Burris MacOmberthe gentlemenBusiness ServicesTucson, AZ Own website2+ sources
Jun 10, 2026Mundt and AssociatesplayFinancial organizationsScottsdale, AZ Own website2+ sources
Jun 3, 2026SeeWriteHearCMDOrganizationMedias and audiovisualScottsdale, AZ Own website2+ sources
Jun 1, 2026MortensenlawofficeskairosLegal consultingTucson, AZ Own websiteSingle source
May 28, 2026Martinez & ShankenqilinBusiness ServicesGilbert, AZ Own websiteSingle source
May 27, 2026Greenway TechnologiesdragonforceTechnologiesAZ Named in claim2+ sources
May 12, 2026Avanti Windows & DoorsauroraManufacturingAZ Named in claim2+ sources
May 8, 2026Arizona Professional Paintingthe gentlemenConstructionPhoenix, AZ Own website2+ sources
Apr 29, 2026AvnetfulcrumsecDistributionAZ Named in claim2+ sources
Apr 27, 2026Lifeline PCSqilinTelecommunicationsAZ Own website2+ sources

Other states

Located claims in the last 12 complete months.

How claims are placed in states

  • Own website (confirmed). A US street address with a ZIP code that belongs to the state, found on the organization's own home, contact or about page. Pages are fetched politely and robots.txt is respected.
  • Named in claim (inferred). The claim text itself names the state, for example "based in Austin, Texas". City names from claim text are never shown, because ransomware groups write that text.
  • Never guessed. We do not place claims from a company name, a phone area code, a paid registry or a map lookup. A claim we cannot place stays in the national count and on no state page.
  • Window. Trends cover the last 12 complete calendar months (UTC). The current month is shown separately because it is still in progress.

Claims come from public ransomware leak sites as collected by our sources. Read the methodology for how claims are collected, corroborated and corrected.